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A  note  on  generalized  bent  criteria  for 
Boolean  functions 

Sugata  Gangopadhyay,  Enes  Pasalic,  Pantelimon  Stanica 


Abstract — In  this  paper,  we  consider  the  spectra  of 
Boolean  functions  with  respect  to  the  action  of  uni¬ 
tary  transforms  obtained  by  taking  tensor  products  of 
the  Hadamard  kernel,  denoted  by  H,  and  the  nega- 
Hadamard  kernel,  denoted  by  N.  The  set  of  all  such 
transforms  is  denoted  by  {H,  N}n.  A  Boolean  function 
is  said  to  be  bent4  if  its  spectrum  with  respect  to  at  least 
one  unitary  transform  in  {H,N}n  is  flat.  We  obtain  a 
relationship  between  bent,  semi-bent  and  bent4  functions, 
which  is  a  generalization  of  the  relationship  between  bent 
and  negabent  Boolean  functions  proved  by  Parker  and 
Pott  [cf.  LNCS  4893  (2007),  9-23].  As  a  corollary  to  this 
result  we  prove  that  the  maximum  possible  algebraic 
degree  of  a  bent4  function  on  n  variables  is  ["] ,  and 
hence  solve  an  open  problem  posed  by  Riera  and  Parker 
[cf.  IEEE-TIT  52:9  (2006),  4142-4159]. 

Keywords:  Walsh-Hadamard  transform,  nega- 
Hadamard  transform,  bent  function,  bent4  function, 
algebraic  degree. 

I.  Introduction 

Let  us  denote  the  set  of  integers,  real  numbers  and 
complex  numbers  by  Z,  R  and  C,  respectively  and 
let  the  ring  of  integers  modulo  r  be  denoted  by  Zr. 
The  vector  space  Z£  is  the  space  of  all  /(-tuples  x  = 
(xn, . . . ,  Xi)  of  elements  from  Z2  with  the  standard 
operations.  By  *+’  we  denote  the  addition  over  Z,  R 
and  C,  whereas  ‘®’  denotes  the  addition  over  Z£  for 
all  n  >  1.  Addition  modulo  q  is  denoted  by  ‘+’  and 
it  is  understood  from  the  context.  If  x  =  (xn, . . . ,  x\) 
and  y  =  ( y.n , . . . ,  yf)  are  in  ZR  we  define  the  scalar 
(or  inner)  product  by  x-y  =  xnyn®- ■  •  ®£22/2 ®aT2/i- 
In  ZR  let  0  and  1  denote  the  zero  vector,  respectively, 
the  all  1  vector.  The  cardinality  of  a  set  S  is  denoted 
by  |Sj.  If  z  =  a+bi  £  C,  then  |z|  =  \/a2  +  b2  denotes 
the  absolute  value  of  z,  and  z  =  a  —  bi  denotes  the 
complex  conjugate  of  z,  where  i2  =  —  1,  and  a,  b  £  R. 
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We  call  any  function  from  Zl(  to  Z2  a  Boolean 
function  in  n  variables  and  denote  the  set  of  all  Boolean 
functions  by  B„.  In  general,  any  function  from  Z?(  to 
(q  >  2a  positive  integer)  is  said  to  be  a  generalized 
Boolean  function  in  n  variables  [5],  whose  set  is  being 
denoted  by  QBqn.  Clearly  QB\  =  Bn .  For  any  /  £  Bn, 
the  algebraic  normal  form  (ANF)  is 

n 

f(xn,...,x  1)  =  0  Fa(n  XT)  (!) 

a=(aTl,...,ai)G^2  i—1 

where  p,a  £  Z2,  for  all  a  £  ZR  The  Hamming  weight 
of  a  £  Zf  is  wt(&)  :=  Yu=i  a* •  The  algebraic  degree 
of  f  £  Bn,  deg (/)  :=  max{u>f(a)  :  a  £  ZR/Ua  7^  0}. 

Now,  let  q  >  2  be  an  integer,  and  let  (  =  e2m^q 
be  the  complex  (/-primitive  root  of  unity.  The  Walsh- 
Hadamard  transform  of  /  €  QBqn  at  any  point  u  £  Z2 
is  the  complex  valued  function 

Hf{ u)  =  2  S  C/(x)(-l)u'x.  (2) 

XG^2 

The  inverse  of  the  Walsh-Hadamard  transform  is  given 
by 

C/(y)  =  nf{ u)(-l)uy.  (3) 

UG^2 

A  function  /  £  QBqn  is  a  generalized  bent  function  if 
and  only  if  |7f/(u)|  =  1  for  all  u  £  ZR  If  q  =  2  and  n 
is  even,  then  a  generalized  bent  function  is  called  a  bent 
function.  A  function  /  £  B„,  where  n  is  odd,  is  said 
to  be  semi-bent  if  and  only  if  |7fy(u)|  £  {0,  v/2},  for 
all  u  €  ZR  The  maximum  possible  algebraic  degree 
of  a  bent  function  on  n  variables  (n  even)  is  7)  and  for 
a  semi-bent  function  on  n  variables  (n  odd)  is  Rp1 
(cf.  [1,  Proposition  8.15],  [2]). 

Let  /  £  Bn  and  V  be  a  subspace  of  ZR  For  any 
a  £  Z2  the  restriction  of  /  to  the  coset  a  +  V  is 
defined  as  /|a+y(x)  =  /(a  +  x),  for  all  x  £  V.  It 
is  to  be  noted  that  the  restriction  of  a  function  /  to  a 
coset  a+V  is  unique  up  to  a  translation.  The  following 
well  known  (cf.  [1])  result  is  stated  without  proof. 

Proposition  1:  Let  n  =  2k,  f  £  Bn  be  a  bent 
function,  V  be  an  (n  —  1) -dimensional  subspace  of 
ZR  a  £  Zj  \  V  such  that  Z^  =  V  U  (a  ©  V).  Then 
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the  restrictions  of  /  to  V  and  a  ®  V,  denoted  f\y 
and  /|a®y  respectively,  are  semi-bent  functions  and 

^/|v(u)^/U®v(u)  =  0  for  a11  u  e  Z2- 

The  nega-Hadamard  transform  of  /  £  Bn  at  any 
vector  u  <E  Z£  is  the  complex  valued  function 

A/}(u)  =  2"t  (-l)/(x)0u'xiwt(x).  (4) 

XG^2 

A  function  /  €  £>„  is  said  to  be  negabent  if  and  only 
if  |7V/(u)|  =  1  for  all  u  £  Z£.  If  f  £  B„ ,  then  the 
inverse  of  the  nega-Hadamard  transform  A ff  is 

(_l)/(y)  =  2-5  ^  A//(u)(— l)y'u,  (5) 

for  all  ygZj. 

The  Hadamard  kernel,  the  nega-Hadamard  kernel 
and  the  identity  transform  on  C2,  denoted  by  H,  N 
and  /,  respectively,  are 


and 


1  1 
1  -1 


The  set  of  2"  different  unitary  transforms  that  are 
obtained  by  performing  tensor  products  H  and  N,  n 
times  in  any  possible  sequence  is  denoted  by  {H,  N}n. 
If  R//  and  R  y  partition  {1, . . .  ,  n},  then  the  unitary 
transform,  U  of  dimension  2"  x  2™,  corresponding  to 
this  partition  is 


where 


u=  n  n>  n  ns 

j’gRh  jeHN 


(6) 


with  H  in  the  jth  position,  similarly  for  Nj,  and 
“(g)”  indicating  the  tensor  product  of  matrices.  Let 
*x  €  {0,1,...,  2^ —  1}  denote  a  row  or  column  number 
of  the  unitary  matrix  U.  We  write 

ix  —  xn 2n  i  +  xn— \2n  2  +  •  •  *  +  £22  -t-  X\ 

where  x  =  (xn,...,xi)  £  Z%.  For  any  Boolean 
function  /  £  Bn,  let  (— l)f  denote  a  2"  x  1  column 
vector  whose  zu  row  entry  is  (— 1)BU\  for  all  u  €  Z£ . 
The  spectrum  of  /  with  respect  to  U  £  {H,N}n  is 
the  vector  U{— l)f.  If  R#  =  {1,  ...,n},  then  the 
entry  in  the  iuth  row  of  t/(—  l)f  is  %f  (u)  and,  if 
Rat  =  {1, . . .  ,n},  then  the  entry  in  the  zuth  row  of 
U ( — l)f  is  Mf{ u),  for  all  u  £  Zj.  In  the  former  case, 
U{— l)f  is  said  to  be  the  Walsh-Hadamard  spectrum 
of  /,  while  in  the  latter  case  it  is  the  nega-Hadamard 


spectrum  of  /.  The  spectrum  of  a  function  /  with 
respect  to  a  unitary  transform  U  is  said  to  be  flat  if 
and  only  if  the  absolute  value  of  each  entry  of  U (— l)f 
is  1. 

Definition  2:  A  function  /  £  Bn  is  said  to  be  bent4 
if  there  exists  at  least  one  U  £  {H,  N}n  such  that 
U(— l)f  is  flat. 

The  bent  and  the  negabent  functions  belong  to  the 
class  of  bent4  functions  as  extreme  cases.  For  results 
on  negabent  and  bent-negabent  functions  we  refer  to 
[3],  [6],  [7],  [9], 

In  this  paper,  we  obtain  a  relationship  between  bent, 
semi-bent  and  bent4  functions,  which  is  a  general¬ 
ization  of  the  relationship  between  bent  and  negabent 
Boolean  functions  proved  by  Parker  and  Pott  [3].  This 
leads  us  to  prove  that  the  maximum  possible  algebraic 
degree  of  a  bent4  function  on  n  variables  is  [{], 
and  hence  solve  an  open  problem  posed  by  Riera  and 
Parker  [4], 

II.  Bent  properties  with  respect  to  {H,  N}n 

Let  sr(x)  be  the  homogeneous  symmetric  Boolean 
function  of  algebraic  degree  r  whose  ANF  is 

SrW  =  (0  X^.-.X^.  (7) 

l<ii  <...<ir<n 

The  intersection  of  two  vectors  c  =  ( cn , . . .  ,ci),x  = 
(xn, . . .  ,xi)  £  Z 2  is  the  vector 

c  *  x  =  (cnxn, . .  .,CiXi). 

We  define  the  function  sr(c  *  x)  by 

sr(c*x)=  0  (c,, a;*,) . . .  (cirxir).  (8) 

l<2i  <...<ir<n 

We  also  define  the  function  g  £  QB^  by  g(x)  =  wt(x) 
mod  4,  for  all  x  €  ZJL  and  we  set  s^x)  =  s2( c  *  x), 
for  easy  writing.  In  the  following  proposition  we  obtain 
a  connection  between  g  and  which  plays  a  crucial 
role  in  developing  connections  between  different  bent 
criteria.  We  note  that  the  result  of  Proposition  3,  for 
c  =  1  is  mentioned  earlier  by  Su,  Pott  and  Tang  in 
the  proof  of  [9,  Lemma  1],  In  the  same  paper  they 
provide  a  construction  of  bent-negabent  functions  of 
all  algebraic  degrees  ranging  from  2  to  ^  (n  even). 

Proposition  3:  Let  x,  c  £  Z{ .  Then,  for  all  x£ZJ, 

c  •  x  +  2s2(x)  =  wt(c  *  x)  mod  4.  (9) 

Proof:  Using  the  identity  £0+2:1  mod  4  =  (2:0© 
£1)  +  2£o£i  mod  4,  by  induction  on  n,  we  get  1  •  x 
mod  4  =  wt(x)  +  2  .  xpXj  mod  4.  Replacing  x 

by  c  *  x,  we  obtain  our  result.  ■ 
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Riera  and  Parker  [4,  Lemma  7]  have  obtained  a 
general  expression  for  the  entries  of  any  matrix  U  £ 
{H,N}n.  We  obtain  an  alternative  description  below 
which  we  use  to  connect  the  spectrum  U(—  l)f  of 
any  /  £  Bn  to  the  Walsh-Hadamard  spectra  of  some 
associated  functions. 

Theorem  4:  If  U  =  EUr,,  'i,  riieRN  Nr  is  a 
unitary  matrix  constructed  as  in  (6),  corresponding  to 
the  partition  Rg,  R  \-  of  { 1. . . . .  n}  where  n  >  2,  then 
for  any  u,  x  £  1%  the  entry  in  the  *uth  row  and  *xth 
column  of  is 

(  —  1)U'X®S2(X)?C'X 


where  c  =  (cn, . . . ,  ci)  £  14%  is  such  that  c%  =  0  if 
*  £  R h  and  c*  =  1  if  *  £  Rat. 

Proof:  We  prove  the  result  by  induction.  The  case 
of  n  =  2  can  be  checked  directly.  By  Proposition  3 


(-1) 


U-X©S2(x)  C-X  _ 


=  (-l) 


Suppose  the  result  is  true  for  n.  Let  u,  x,  c  £  1%, 
and  u'  =  (ttn+i, u), x'  =  (xn+i,x),c'  =  (c„+ i,c)  £ 
Z%+1.  Let  U  £  {H,N}n  be  the  unitary  transform 
induced  by  the  partition  corresponding  to  c  £  1%.  The 
transform  corresponding  to  the  partition  induced  by 
c!  =  (cn+i,c)  is  TCri+1  (g)  U  where  TCri+1  =  H  if 
c„+i  =  0  and  TCn+J  =  N  if  cn+i  =  1.  By  taking  the 
tensor  product  of  Tc  and  U  we  obtain 


ACn- 1-1  ACn-- 1-1 

2^(TCn+l®U)=  (  ,8°  +  1 


^10  ^11 


where 


A°r 


((-!)<“ 


n+l,c)*(j,x)) 


Therefore, 


2^(TCri+1®U)  =  (-l)u  x* 


\  u/  •x/  wt(c'*x'] 


2n+1x2n+1 


This  proves  the  result.  ■ 

In  the  following  two  theorems  we  establish  a  con¬ 
nection  between  bent,  semi-bent  and  bent4  functions, 
which  is  a  generalization  of  the  relationship  between 
bent  and  negabent  Boolean  functions  proved  by  Parker 
and  Pott  [3],  The  unitary  transform  in  {H,N}n  in¬ 
duced  by  the  partition  corresponding  to  c  £  1%  is 
denoted  by  Uc  while  the  entry  in  the  *uth  row  of  the 
spectrum  Uc(— l)f  is  UJ(u). 

Theorem  5:  Let  f  £  Bn,  where  n  is  even.  Then,  / 
is  bent4  if  and  only  if  there  exists  c  £  1%  such  that 
f  ®  s%  is  bent. 

Proof:  If  /  is  bent4,  then  there  exists  c  £  1%  such 
that  |Z7j(u)|  =  1  for  all  u  £  1%.  By  Theorem  4  we 


obtain 


u)  =  2-f  £(- l/(x 


2(x),c'xt_ 


(-1)1 


x£Z~ 


=  2-5  E(-l)/C 


X)®S2(X)(_1)UX 


(10) 


xGc1 


+  *2“5  y  (-l)/(x)®s2(x)(_i)llx. 

x^c-1- 


Therefore 


2”=  £  (_1)/(X)®S2(X)(_1)1 


y  (— i)/(x>®s§cx)  (• _ i)ux 

yx^c-1- 


(11) 


By  Jacobi’s  two-square  theorem,  we  know  that  2"  has  a 
unique  representation  (disregarding  the  sign  and  order) 
as  a  sum  of  two  squares,  namely  2"  =  (25  )2  +  0,  if 
n  is  even,  and  2"  =  (2^~ )2  +  (2~s~ )2,  if  n  is  odd. 
Then  for  n  even. 


l?Wu)|  =  |2-5  Y  (-l)/(x)0^(x)(-l)u'x 

XG^2 

=  |2“5  y  {-1)/(x)®s2(x)(-1)u- 


_i_2-5  y  (_i)/(x)®s2(x)(_i)u-x| 

X0C-1- 

=  1,  Vue zj. 

(12) 

Thus,  /  ®  s%  is  a  bent  function. 

Suppose  /  ffi  «2  is  a  bent  function.  If  c  =  0  there  is 
nothing  to  prove.  If  c  0,  then 


25^(u)  =  Y  (-!)/( 


x)©s£(x)©u-x  c-x 


=  E  (-!)/(X 


X)©S2(X)®U‘X 


(13) 


xGcJ 


jrl  y  (_i)/(x)®s2(x)®u'+ 

X^C-1- 


Since  /  ®  *2  is  a  bent  function  and  c  is  a  subspace 
of  codimension  1,  by  Proposition  1  the  restrictions  of 
/  on  c  and  its  remaining  coset  are  semi-bent  and 
their  Walsh-Hadamard  spectra  are  disjoint.  Therefore, 
the  right  hand  side  of  the  above  equation  belongs  to 
the  set  {±25 ,±25*}  for  all  u  £  1%.  This  proves  that 
/  is  a  bent4  function.  ■ 

Theorem  6:  Let  /  £  Bn  where  n  is  odd.  If  /  is 
bent4,  then  there  exists  c  £  1%  such  that  /  ®  s%  is 
semi-bent. 
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Proof:  As  in  the  previous  theorem,  the  function 
f  is  bent4  implies  that  there  exists  c  €  ZJ  such  that 
\Wj{vt)  =  1  for  all  u  £  Since  n  is  an  odd  inte¬ 

ger  by  (11)  we  have  ^xecJ_ (— 1)-^X)0S2(X)(— l)u 'x, 

Ex^(-1)/(x)0sS(x)(-1)U'X  e  {-2^,2^}. 

Therefore,  by  similar  argument  as  in  (12)  we  obtain 
|7f/0Sc(u)|  £  {0,  a/2}-  which  implies  that  /  ®  s 2  is 
semi-bent.  ■ 

The  converse  of  Theorem  6  is  not  true  in  general, 
since  the  argument  used  in  Theorem  5  to  prove  the 
converse  is  not  applicable  when  n  is  an  odd  integer. 
This  is  illustrated  by  the  following  example. 

Example  7:  Suppose  n  =  3.  The  function  s|(x)  = 
X1X2  +  X1X3  +  X2X3.  Let  /(x)  =  X\X2-  It  can 
be  directly  checked  that  f  +  s%  is  semi-bent  but 
|W|(0)|  =  y/2.  Therefore,  the  spectrum  of  /  is  not 
flat  with  respect  to  the  transform  Uj_. 

Riera  and  Parker  [4,  p.  4125  ]  posed  the  following 
open  problem: 

What  is  the  maximum  algebraic  degree  of  a  bent 4 
Boolean  function  of  n  variables? 

The  solution  of  this  problem  can  be  obtained  as  a 
corollary  to  Theorems  5  and  6. 

Corollary  8:  The  maximum  algebraic  degree  of  a 
bent4  Boolean  function  on  n  variables  is 

Proof:  Suppose  f  £  Bn  is  a  bent4  function.  Then 
by  Theorems  5  and  6  the  function  /  ®  is  bent  or 
semi-bent  depending  upon  n  being  an  even  or  an  odd 
integer,  respectively.  It  is  known  that  the  maximum 
algebraic  degree  of  a  bent  or  semi-bent  function  is 
whereas  is  an  at  most  quadratic  function.  This 
proves  that  the  algebraic  degree  of  /  is  upper  bounded 
by  rf  1-  ■ 

Remark  9:  Equation  (10)  connects  U  £  {H:N}n 
to  the  approximation  of  a  Boolean  function  by  the 
functions  of  the  form  s^x)  ©  u  •  x.  This  may  endow 
some  cryptographic  significance  to  the  spectra  of  / 
with  respect  to  the  transforms  in  {H,N}n. 
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